General

  • Target

    012b2747c74f6f67f6b077bf151e0220N.exe

  • Size

    44KB

  • Sample

    240726-nmlezavdrp

  • MD5

    012b2747c74f6f67f6b077bf151e0220

  • SHA1

    868cadeb23359744eb0e2b43c1673b43b48c551e

  • SHA256

    0c6010dd2a7f8d2d71fdb32aec70cbc607acc3b3911864e602b4c043b6fd2ad1

  • SHA512

    7d653f7dbd4796be3fbabc73335474be8cd5e533d6cffa1cbbf521c8107ca1f5a038a44b896cd26e48a3d4d35b41833667ec2b1e2bc41f6adf796894a9005400

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJBZBZaOAOIB3jM2jM7l+:V7Zf/FAxTWoJJB7LD2I2IU

Malware Config

Targets

    • Target

      012b2747c74f6f67f6b077bf151e0220N.exe

    • Size

      44KB

    • MD5

      012b2747c74f6f67f6b077bf151e0220

    • SHA1

      868cadeb23359744eb0e2b43c1673b43b48c551e

    • SHA256

      0c6010dd2a7f8d2d71fdb32aec70cbc607acc3b3911864e602b4c043b6fd2ad1

    • SHA512

      7d653f7dbd4796be3fbabc73335474be8cd5e533d6cffa1cbbf521c8107ca1f5a038a44b896cd26e48a3d4d35b41833667ec2b1e2bc41f6adf796894a9005400

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJBZBZaOAOIB3jM2jM7l+:V7Zf/FAxTWoJJB7LD2I2IU

    • Renames multiple (3094) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks